Viewing profile — suixo

This reminds me of something similar I did about 5 years ago: https://blog.securem.eu/projects/2015/03/08/flooding-the-phi... One important thing is to report the phishing attempt,…

Have you heard of Toggl? It's a time tracker that integrates with your browser and let you click click click on Google Agenda meetings, JIRA tasks, GitHub PRs and hopefully most of…

Keep in mind that those 5 million people did not submit their fingerprint on this website, so they are not "known" by this tool.

Last part of this comment made me laugh, trying to imagine someone shouting over Slack "PATCH YOUR BRIDGE, NOW!!"

I love the "check if integer addition will overflow" in Python: def adding_will_overflow(x, y): return False I have no idea if it's actually true but I find that funny.

Awesome analysis, quite instructive. I am even considering adding it to my server performance tool, as a frontend performance metric, since I guess it could be easily automated. Im…

In the original U2F spec, I think there was an "answer" to this revocation issue: "enroll a second device for every origin, and keep this one in a safe". This way you can still con…

OP here. Thanks to all your rich comments, I have updated the post with the final conclusion: GitHub is gradually (and silently) deploying HTTPS to custom-domains websites hosted o…

Thanks for the detailed post. The rogue word seems to be a bit too strong, as I totally understand how GitHub generated the cert thanks to Let's Encrypt. The surprising bit is that…

Thank you! This approves the gradual release thesis, although I am surprised that no communication was made by GitHub.

There is no huge problem, just an interrogation over how this happened since the UI doesn't allow it and the documentation states this is not possible.

Actually this was exactly what happened and surprised me. I was moving my blog out of GitHub Pages to a self-hosted solution, and it's only after switching DNS and generating the c…